University of Surrey

Test tubes in the lab Research in the ATI Dance Research

Human-Generated and Machine-Generated Ratings of Password Strength: What Do Users Trust More?

Alqahtani, Saeed Ibrahim, Li, Shujun, Yuan, Haiyue and Rusconi, Patrice (2019) Human-Generated and Machine-Generated Ratings of Password Strength: What Do Users Trust More? EAI Endorsed Transactions on Security and Safety.

Password_Strength_User_Study__EAI_Endorsed_Transactions_.pdf - Accepted version Manuscript

Download (623kB) | Preview


Proactive password checkers have been widely used to persuade users to select stronger passwords by providing machine-generated strength ratings of passwords. If such ratings do not match human-generated ratings of human users, there can be a loss of trust in PPCs. In order to study the effectiveness of PPCs, it would be useful to investigate how human users perceive such machine- and human-generated ratings in terms of their trust, which has been rarely studied in the literature. To fill this gap, we report a large-scale crowdsourcing study with over 1,000 workers. The participants were asked to choose which of the two ratings they trusted more. The passwords were selected based on a survey of over 100 human password experts. The results revealed that participants exhibited four distinct behavioral patterns when the passwords were hidden,and many changed their behaviors significantly after the passwords were disclosed, suggesting their reported trust was influenced by their own judgments.

Item Type: Article
Divisions : Faculty of Health and Medical Sciences > School of Psychology
Authors :
Alqahtani, Saeed Ibrahim
Li, Shujun
Date : 29 December 2019
Funders : EPSRC
Copyright Disclaimer : © 2020 S. Alqahtani et al.
Uncontrolled Keywords : Password strength, password meter, user perception, trust, human-generated, machine-generated, ratings
Depositing User : James Marshall
Date Deposited : 30 Jan 2020 14:37
Last Modified : 30 Jan 2020 14:37

Actions (login required)

View Item View Item


Downloads per month over past year

Information about this web site

© The University of Surrey, Guildford, Surrey, GU2 7XH, United Kingdom.
+44 (0)1483 300800